Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: PxkUglDMfbAISd4vMDXoF9Nask1MAM0zMHNOJ1lDnZc=
Subject key identifier: D3:B2:5C:81:F8:E5:88:2E:E4:B8:F7:9D:82:F2:03:A4:B9:D4:3F:A9
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0199FCFD62DE1DA844C3F4F3A1F9FD37F8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 068E
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: 4wDdBtDa4B2YGt23U4cQu/I9lxh1cTTzmt/bdRGifkI=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:62:de:1d:a8:44:c3:f4:f3:a1:f9:fd:37:f8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=d3b25c81f8e5882ee4b8f79d82f203a4b9d43fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:8e:b8:af:53:f0:06:b1:2d:59:2c:06:67:
e9:e3:d6:92:80:2c:79:d0:ca:2f:23:3c:de:28:eb:
18:bb:ef:56:4c:e5:40:58:80:2c:f3:c3:83:e1:53:
53:93:b8:62:97:bc:67:96:d1:4a:a9:65:e2:87:60:
d8:9b:8e:bc:df:a9:22:59:9e:01:29:29:5f:43:b7:
82:20:22:2e:cd:d0:fa:2b:b9:0f:e1:ad:de:7a:6f:
52:27:f0:5e:f3:49:a3:70:9f:6f:b5:47:40:80:a0:
4d:5f:28:b4:2b:72:4a:7b:81:d7:84:3f:e1:76:b4:
64:54:e7:8e:3c:a5:57:ef:be:4e:ca:ba:73:4a:2d:
0b:53:60:58:bc:1e:b0:7a:61:d0:59:f9:8e:d4:91:
fc:99:4b:ea:b2:c1:51:ed:13:b1:4d:dd:42:b6:f7:
7f:2c:78:91:86:57:a2:ef:d4:4b:dd:82:eb:29:53:
31:61:39:1d:04:05:69:f2:14:eb:ee:e5:8e:35:9b:
04:78:1e:ad:16:0d:d6:c9:53:f3:f3:eb:98:9e:2b:
91:c8:49:64:34:9b:9b:b6:f2:43:4b:1d:b3:74:c7:
fd:0f:03:76:7c:f5:3d:33:9a:a8:d0:4e:8e:af:d3:
50:4b:50:03:3e:42:d2:98:fc:97:84:a6:b1:4f:71:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:5C:81:F8:E5:88:2E:E4:B8:F7:9D:82:F2:03:A4:B9:D4:3F:A9
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:80:0c:02:3d:93:a1:1c:4a:f7:6d:58:67:dc:7e:e3:85:b2:
6d:ed:0f:85:42:4a:b2:6d:df:ee:eb:66:a7:42:95:3d:90:34:
6d:e4:4e:c9:c2:6a:89:93:2e:f4:59:33:e5:b2:2f:85:1e:a7:
fb:87:db:a0:a0:2b:0e:a0:a5:6f:81:a9:7a:ed:e8:77:3d:e2:
b8:fe:48:50:4d:41:71:19:33:5a:61:8d:8e:7e:2b:d8:ae:81:
08:7f:e8:7b:cc:f9:e8:7e:8f:0c:cd:73:33:ca:de:ee:8a:09:
e6:a2:06:bb:a8:81:da:10:39:8a:02:da:e4:64:a5:c8:40:03:
ff:31:77:4f:0c:ff:0e:e0:b5:f1:cc:53:22:84:d8:dc:25:03:
0d:97:02:f3:d7:67:a8:09:6c:29:85:f1:90:2c:26:96:bd:b6:
98:e1:e2:8a:07:49:ed:d8:e1:b4:62:05:d9:47:d4:11:74:74:
46:b6:1a:e5:2e:c3:9e:4c:02:dd:c2:c3:8f:7a:40:91:3e:19:
07:e3:4b:86:a3:e7:0b:69:03:34:d4:d3:b4:70:79:b7:b4:8e:
34:10:93:48:8d:cc:4c:a4:4f:ef:47:09:f2:3b:3f:b1:d6:b9:
e8:33:80:00:22:c4:9f:97:59:a4:ee:f0:76:08:15:d9:5b:2a:
07:31:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:55 2025 by rpki-client